hanwha-security vulnerabilities

Products

• snh-v6410pn firmware 10
• snh-v6410pnw firmware 10
• smart security manager 2
• hrd-1641 firmware 1
• hrd-1642 firmware 1
• hrd-440 firmware 1
• hrd-442 firmware 1
• hrd-443 firmware 1
• hrd-840 firmware 1
• hrd-841 firmware 1
• hrd-842 firmware 1
• srd-1694u firmware 1
• srn-1673s firmware 1
• srn-472s firmware 1
• srn-873s firmware 1

Latest hanwha-security CVEs

Newest publication first

1. CVE-2019-12223 An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long usern...

   Published 2019-09-05

   High·CVSS 7.5 EPSS 2.4%

   An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the...

2. CVE-2018-11689 Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was tra...

   Published 2018-06-14

   Medium·CVSS 6.1 EPSS 1.6%

   Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)

3. CVE-2018-6303 Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams

   Published 2018-03-13

   High·CVSS 7.5 EPSS 1.0%

   Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams

4. CVE-2018-6302 Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams

   Published 2018-03-13

   High·CVSS 7.5 EPSS 1.0%

   Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams

5. CVE-2018-6301 Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams

   Published 2018-03-13

   High·CVSS 7.5 EPSS 1.1%

   Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams

6. CVE-2018-6300 Remote password change in Hanwha Techwin Smartcams

   Published 2018-03-13

   Critical·CVSS 9.8 EPSS 1.1%

   Remote password change in Hanwha Techwin Smartcams

7. CVE-2018-6299 Authentication bypass in Hanwha Techwin Smartcams

   Published 2018-03-13

   Critical·CVSS 9.8 EPSS 1.4%

   Authentication bypass in Hanwha Techwin Smartcams

8. CVE-2018-6298 Remote code execution in Hanwha Techwin Smartcams

   Published 2018-03-13

   Critical·CVSS 9.8 EPSS 3.6%

   Remote code execution in Hanwha Techwin Smartcams

9. CVE-2018-6297 Buffer overflow in Hanwha Techwin Smartcams

   Published 2018-03-13

   Critical·CVSS 9.8 EPSS 1.2%

   Buffer overflow in Hanwha Techwin Smartcams

10. CVE-2018-6296 An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams

    Published 2018-03-13

    Medium·CVSS 5.3 EPSS 0.75%

    An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams

11. CVE-2018-6295 Unencrypted way of remote control and communications in Hanwha Techwin Smartcams

    Published 2018-03-13

    Critical·CVSS 9.8 EPSS 0.72%

    Unencrypted way of remote control and communications in Hanwha Techwin Smartcams

12. CVE-2018-6294 Unsecured way of firmware update in Hanwha Techwin Smartcams

    Published 2018-03-13

    Critical·CVSS 9.8 EPSS 1.1%

    Unsecured way of firmware update in Hanwha Techwin Smartcams

13. CVE-2017-5169 An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and....

    Published 2017-02-13

    High·CVSS 7.5 EPSS 1.3%

    An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and Apache Felix Gogo servers that are installed as part of this product. By issuing...

14. CVE-2017-5168 An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulnerabilities have been identified. The flaws exist within the ActiveMQ Broker servic...

    Published 2017-02-13

    High·CVSS 7.5 EPSS 3.6%

    An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulnerabilities have been identified. The flaws exist within the ActiveMQ Broker service that is installed as part of the product. By issuing specific HTTP requests, i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.